VULNERABILITY INTELLIGENCE

CVE-2016-1542

CVSS score7.5 HIGH
EPSS probability74.62%
CISA KEVNot currently listed
Published2016-06-13
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references